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Anicndments to the Claims; 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (Currently amended) A method of providin | > - managin& assertions comprising the steps of; 

selling a pool of imallocated time; 

upon request, generating an assertion between a name and a public key, the 
assertion having a lifetim e, during which tlie assertion is usable to provide an indicat ion that the 
public key is associated with the name.> and subtracting the lifetime ftom the imallocated time; 
and 

upon request, revoking an assertion and adding any remaining li fetime of the 
assertion to the unallocated time* 

2. (Original) The method of claim 1 comprising the further step of eroding unallocated time 
over time. 

3. (Currently amended) A computer implemented system for managing assertions between 
names and public keys, the system comprising: 

a repository containing an unallocated time, the unallocated lime indicating an 
amount of time available for assertions; 

a client interface: 

a purchase component operatively coupled to the client interface and to the 
repository, and adapted to add a^e^ested-bulk lifetime requested through the client interface t o 
the unallocated time; 
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a request component operativelv coupled to the client interface and to the 
repository, and adapted to, upon generation of an assertion having a r e qu e st e d li Fetim c requested 
throuah the client interface , deduct the requested lifetime from the unallocated lime; and 

a revocation component operativelv coupled to the client interface and to the 
repository and adapted to, upon revocation of an assertion having a remaining lifetime, add the 
remaining lifetime to the unallocated time. 

4. (Original) The system of claim 3 wherein each assertion is a public key certificate. 

5. (Original) The system of claim 3 further adapted to: 

monitor when the unallocated time falls below a threshold, and 

notify a user associated with the unallocated time if the unallocated time falls 
below die threshold. 

6. (Currently amended) The system of claim 3 wherein the request component detenriines 
whether the requested lifetime is greater than the unallocated time, and if the requested lifetime is 
greater than the imallocated time, presents the a_user associated with the unallocated time with a 
set of options for remedying the insufficiency of the unallocated time. 

7. (Currently amended) A processing platform implemented method of processing a request for 
an assertion between a name and a public key, the method comprising the computer implemented 
$teps of: 

maintaining an unallocated time, the imallocated time being time available for 

assertions; 

accepting a request for an assertion and a requested lifetime during which Jhe 
assertion is usable to provide an indication that the public key is associated with the name: 

determining whether the unallocated time is greater than or equal to the requested 

lifetime; and 

upon detennining that the unallocated time is greater than or equal to the 
requested lifetime, deducting the requested lifetime from the unallocated tinie. 
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8. (Original) The method orclaim 7 comprising the further step of forwarding the request for 
an assertion to an entity responsible for generating assertions. 

9. (Original) The method of claim 7 wherein the assertion is a public key certificate, 

10. (Original) The method of claim 7 comprising the further step of eroding the unallocated time 
over time. 

1 1 . (Currently amended) A processing platform implemented method of processing a request for 
revocation of an assertion between a name and a public key, the method comprising the computer 
implemented steps of : 

maintaining an unallocated time, the unallocated time being time available for 

assertions; 

identifying an assertion to be revoked, the assertion having a remaining lifetime 
during which the assertion is usable to_p,rovide an indication that the public key is associated with 
the name : and 

adding the remaining lifetime to the unallocated time. 

12. (Original) The method of claim 1 1 wherein the assertion is a public key certificate. 

13. (Cancelled) 

14. (Previously presented) An article of manufacture comprising a computer-readable storage 
medium, the computer-readable storage medium containing instructions for: 

generating an entry in a repository, the entry including an. unallocated time; 

receiving a request for a purchase of bulk lifetime; 

adding the bulk lifetime to the unallocated time in the event that a request for a 
purchase of bulk Jifetime is received; 

receiving a request for an assertion and a requested lifetime, the assertion being 
between a name and a public key; 
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deducting the requested lifetime froro the unallocated time in the event that a 
request for an assertion is received; 

receiving an identification of an assertion to be revoked, the assertion having a 
remaining lifetime; and 

adding the remaining lifetime to the unallocated time in the event that an 
identification of an assertion to be revoked is received. 

15. (Currently amended) A computer implemented system for allocating assertions comprising: 

means for allocating a pool of unallocated time available for assertion validity; 
a client interface: 

means for processing a request received through, the client interface for an 
assertion between a name and a public key, the assertion having a lifetime, the means for 
processing the request being operativelv coupled to the client interface and to the means for 
allocating, and subtracting the lifetime from the unallocated time; and 

means for processing a revocation of an existing assertio n, the means for 
processing the revocation beinp operativelv coupled to the means for allocating, and b y 
determining any remaining lifetime of the existing assertion and adding at least a portion of the 
remaining lifetime of the assertion to the imallocatcd time. 

16. (Previously presented) The system of claim 15 fiuther comprising: 

means for monitoring when the unallocated time falls below a threshold, and for 
notifying a user associated with the unallocated time if the unallocated time falls below the 
threshold. 

17. (Previously presented) A computer readable medium having instructions stored thereon for 
execution on a processing platform to execute a method comprising; 

selling a pool of unallocated time; 
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upon request, generating an assertion between a name and a public key» the 
assertion having a Hfetime and subtracting the lifetime from the unallocated time; and 

upon request, revoking an assertion and adding any remaining lifetime of the 
assertion to the unallocated time. 

1 8» (Currently amended) A computer readable medium according to claim 17 where[[ ]]in the 
instructions for execution further comprise: 

eroding unallocated time over time. 

1 9. (Previously presented) A computer readable medium having instructions stored thereon 
for execution on a processing platform to execute the method of claim 7, 

20. (Previously presented) A computer readable medium having instructions stored thereon 
for execution on a processing plulform to execute the method of claim 9- 

21 . (Previously presented) A computer readable medium having instructions stored thereon 
for execution on a processing platform to execute the method of claim 10* 
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